[client.bootstrap-mds]
  key = not-in-hiera
  caps mon = "allow profile bootstrap-mds"
